Routing OPT1 to WAN/LAN

TomT

Hi

I'm just testing at the moment and have a virtual machine with 3 interfaces.

WAN 192.168.18.99
LAN 192.168.1.1
OPT1 192.168.2.1

LAN can ping all LAN devices and access the Internet

How do I configure OPT1 to have access to LAN and WAN ?

Once that is working, is it possible to restrict OPT1 as follows
AccessControlList to allow IP Addresses access to LAN & WAN
OtherList to allow IP Addresses to WAN Only ?

Thanks

viragomann

Any access has to be allowed by firewall rules. Firewall > Rules > OPT1.
If there is no rule, there is no access from this inteface.
On LAN interface pfSense has a default allow any-to-any rule.

You can add aliases in Firewall > Aliases > IP and use these in the rules for destination or source.

johnpoz

When you say wan do you mean internet? Wan net is not internet.. If you want to all internet you would need a any rule, or a ! (not rule) for your networks, etc.

TomT

Thanks I've added a rule to OPT1 to allow specific address to access LAN.

How do I allow all from OPT1 -> Internet ?

Thanks

TomT

Adding an any -> any rule works, but that then allow any to the LAN as well.

Where I only want a specific list to the LAN.

TomT

I think I may have it working…

Does this look correct ?

Allow ANY -> ANY
Block !WiFiACL from LAN

pfsense.jpg_thumb

viragomann

It's hard to say, since we don't know what's your goal.

The first rule blocks any traffic to LAN from anywhere, but WiFiACL. The second rule allows any to anywhere.
So all in all everything from any to any is allowed, but nothing from WiFiACL to LAN subnet. If that is what you want it's your solution.